CVE-2023-3692
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
In the GitHub repository admidio/admidio prior to version 4.2.10, there is a vulnerability allowing unrestricted upload of files with dangerous types.
Risk Assessment
An attacker could upload malicious files, potentially leading to code execution on the server and compromising system security.
Recommendation
It is recommended to upgrade to version 4.2.10 or later and implement mechanisms to restrict the types of files that can be uploaded.
Other vulnerabilities in admidio/admidio
See all- CVE-2023-4190Medium
Insufficient session expiration in the GitHub repository admidio/admidio prior to version 4.2.11 may lead to unauthorized access.
- CVE-2023-3303Low
Improper access control exists in the GitHub repository admidio/admidio prior to version 4.2.9.
- CVE-2023-3302High
In the GitHub repository admidio/admidio prior to version 4.2.9, there is improper neutralization of formula elements in a CSV file.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.